Netskope Certified Cloud Security Architect

Question 1

Your customer is currently using Directory Importer with Active Directory (AD) to provision users to Nelskope. They have recently acquired three new companies (A. B. and C) and want to onboard users from the companies onto the NetsKope platform. Information about the companies is shown below.
- Company A uses Active Directory.
-- Company B uses Azure AD.
-- Company C uses Okta Universal Directory.
Which statement is correct in this scenario?

A. Users from Companies A. B, and C can be provisioned to Netskope by deploying additional AD Importers and integrating more than one SCIM solution.

B. Users from Company B and Company C cannot be provisioned because the customer is already using AD Importer.

C. Either Company B or Company C users cannot be provisioned because integration with only one SCIM solution is allowed.

D. Company A users cannot be provisioned to Netskope because the customer is already using AD Importer to import users from another Active Directory environment.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

You are consuming Audit Reports as part of a Salesforce API integration. Someone has made a change to a Salesforce account record field that should not have been made and you are asked to venfy the previous value of the structured data field. You have the approximate date and time of the change, user information, and the new field value.
How would you accomplish this task?

A. Create a classic report and apply a query that filters on the changed field value.

B. Query Skope IT Page Events and look for the specific Page URL that was called under the Application section.

C. Query Skope IT for an Access Method of API Connector and search Application Event Details for the Old Value field using the User details and Edit Activity.

D. Use the Application Events Data Collection within Advanced Analytics and filter on the changed field value.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

You successfully configured Advanced Analytics to identify policy violation trends Upon further investigation, you notice that the activity is NULL. Why is this happening in this scenario?

A. The SSPM policy was not configured during setup.

B. A user accessed a static Web page.

C. The REST API v1 token has expired.

D. A policy violation was identified using API Protection.

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

You need to monitor the health of configured IPsec or GRE tunnels.
In this scenario, which two methods are supported by Netskope to accomplish this task? (Choose two.)

A. Use ICMP keepalive probing.

B. Use Layer 4 health checks.

C. Use Netskope Trust Portal.

D. Use Dead Peer Detection.

Correct Answer: B,D

Question 5

Users at your company's branch office in San Francisco report that their clients are connecting, but websites and SaaS applications are slow When troubleshooting, you notice that the users are connected to a Netskope data plane in New York where your company's headquarters is located.
What is a valid reason for this behavior?

A. The Netskope Client's DNS call to Secure Forwarder is failing

B. The Netskope Client's on-premises detection check failed.

C. The Netskope Client's default DNS over HTTPS call is failing.

D. The closest Netskope data plane to San Francisco is unavailable.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

You jus! deployed and registered an NPA publisher for your first private application and need to provide access to this application for the Human Resources (HR) users group only. How would you accomplish this task?

A. 1. Enable private app steering in the Steering Configuration assigned to the HR group.
2. Create a new Private App.
3. Create a new Real-time Protection policy as follows;
Source = HR user group Destination = Private App Action = Allow

B. 1. Enable private app steering in the Steering Configuration assigned to the HR group.
2. Create a new private app and assign it to the HR user group
3. Create a new Real-time Protection policy as follows:
Source = HR user group Destination = Private App Action = Allow

C. 1. Enable private app steering in Tenant Steering Configuration.
2. Create a new private app and assign it to the HR user group.

D. 1. Create a new private app and assign it to the HR user group.
2. Create a new Real-time Protection policy as follows:
Source = HR user group Destination = Private App Action = Allow.

Correct Answer: A

Question 7

Review the exhibit.

You installed Directory Importer and configured it to import specific groups ot users into your Netskope tenant as shown in the exhibit. One hour after a new user has been added to the domain, the user still has not been provisioned to Netskope.
What are three potential reasons for this failure? (Choose three.)

A. The default collection interval is 180 minutes, therefore a sync may not have run yet.

B. The user is not a member of the group specified as a filter

C. Directory Importer does not support ongoing user syncs; you must manually provision the user.

D. Active Directory integration is not enabled on your tenant.

E. The server that the Directory Importer is installed on is unable to reach Netskope's add-on endpoint.

Correct Answer: B,D,E

Netskope Certified Cloud Security Architect - NSK300 Exam Practice Test

Latest Update

Useful Links

Contact Us